Privacy policy

Responsible person in the sense of the data protection laws

The responsible party, hereinafter referred to as „Connexion Emploi“ or „we“, within the meaning of the General Data Protection Regulation (hereinafter referred to as GDPR) Art.4 para.7, and other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Eureo Holding SAS
18 Avenue Félix Faure
69007 Lyon
France

E-mail: info[at]connexion-emploi.com

Contact details of the data protection officer

You can reach our data protection officer at the following contact details:

Eureo Holding SAS
18 Avenue Félix Faure
69007 Lyon
France

E-mail: datenschutz[at]connexion-emploi.com

Explanation of terms

In this data protection declaration, the following terms are used, among others:

a) Personal data (as defined in Art.4(1) of the GDPR).

„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“ or „you“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

b) Processing (pursuant to Art.4(2) GDPR).

„Processing“ means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

c) Restriction of processing (pursuant to Article 4(3) of the GDPR).

„Restriction of processing“ means the marking of stored personal data with the aim of limiting their future processing;

d) Profiling (as referred to in Article 4(4) of the GDPR).

„Profiling“ means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location;

e) Pseudonymisation (pursuant to Art.4(5) GDPR).

„Pseudonymisation“ means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person;

f) File system (pursuant to Art.4 para.6 GDPR).

„File system“ means any structured collection of personal data accessible according to specified criteria, whether such collection is maintained in a centralised, decentralised or functional or geographical manner;

g) Controller (as defined in Art.4(7) GDPR).

„Controller“ means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law;

h) Processor (pursuant to Art.4(8) GDPR).

„Processor“ means a natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller;

i) Recipient (pursuant to Art.4 para.9 GDPR).

„Recipient“ means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients and the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;

j) Third Party (pursuant to Art.4 para.10 GDPR).

„Third party“ means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor;

(k) Consent (pursuant to Art.4(11) GDPR).

„Consent“ of the data subject means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her;

Storage and data processing: purposes, legal bases and duration of storage

Learn more about the various purposes for which we process personal data below. We will also inform you about the legal basis for each of these purposes and how long we store the data. When collecting personal data with the corresponding consent of the data subject, Art.6 para.1 GDPR serves as the legal basis for its processing. The same applies to the processing of data required for the implementation of pre-contractual measures. Data collected for the fulfilment of legal obligations and their processing are carried out on the same legal basis.

Data processing during general use of our websites

Connexion Emploi automatically collects data and information from the calling device each time our web pages are called up and stores this data in the log files of our server. Through the integration of services such as Google Analytics, this data may also be collected and processed by third party services such as Google for analysis purposes and to improve the user experience. The browser used and its version, the operating system of the accessing system, the referring Internet address (referrer), the subordinate websites accessed through our website, the date and time of access, the IP address and the Internet provider (ISP) of the accessing party as well as other comparable data and information may be recorded. This data is also used to prevent attacks on our IT systems and for subsequent analysis. Connexion Emploi stores this data including the IP address for a period of one month (in days depending on the length of the month) and then deletes the data. The IP address is used during access by the data subject to display the website content in the accessing browser. Furthermore, the storage is based on a legitimate interest according to Art. 6 (1) GDPR. On the one hand, it would not be possible to use the website without the IP address, and on the other hand, the data stored for a limited period of time forms the basis for possible security and functional analyses in retrospect. No conclusions about the data subject are drawn from this general data; rather, it serves to ensure the correct presentation of our websites and the protection of personal data.

Improving our search and individualised recommendations

Connexion Emploi may store information about your usage behaviour in order to create statistical models to improve our websites and user experience. This applies in particular to the search function and the recommendation of individually suitable job offers. We store data in pseudonymised form via identification numbers or the IP address, which means that we cannot establish a direct personal reference from the data obtained. As part of the daily backups, the IP address of the previous month is deleted on the same day of the following month. Furthermore, the legal basis for this is also Art.6 para.1 GDPR.

Application forms

If we provide application forms on our websites in order to respond to job offers published with us, or if you send an email to the email address stated in the job offer without being logged in with your Connexion Emploi account, and you then submit your application by clicking on Send, we may transmit your details to the job provider. The legal basis for this is also consent in accordance with Art.6 para.1 GDPR. In this case, it is possible that the job provider is not based in an EU member state. No information about the job provider can be provided via anonymised box number applications, as this would affect the confidentiality and secrecy interests of the job provider.

Newsletter

If you register for the Connexion Emploi newsletter, we will use your email address to send you the newsletter with current job offers and articles on Connexion Emploi. The newsletter is sent using the Mailchimp service platform, to which the email address and, if applicable, first and last name are transmitted in order to send you the newsletter in a personalised way. At the beginning of the registration for the newsletter, we ask once in the double opt-in procedure for an additional confirmation by email, with which the registration is considered complete. The legal basis for this is the declaration of intent in accordance with Art. 6 Para. 1 GDPR. As proof, the IP address and time of registration are also logged and consequently stored; the justified interest here is proof of registration in accordance with Art. 6 Para. 1 GDPR. Connexion Emploi necessarily stores your email address in order to send you the newsletter until you unsubscribe or the newsletter is discontinued on our part. The newsletter is usually sent on Thursdays, in the morning and once a week in German and French, variations are possible. Furthermore, a special newsletter with new articles and interesting information is published approximately every two weeks, as well as e-mails with important information on technical or content-related changes on Connexion Emploi are possible. Here, too, the legal basis is a legitimate interest according to Art. 6 Para. 1 GDPR in the perception of our business interests. The mails sent by us or by Mailchimp contain an image or piece of code (so-called tracking bugs or tracking pixels), which send feedback such as a read confirmation to us for statistical evaluation. This data is stored anonymously and is used to improve our service, such as the newsletter structure, appearance or publication date. The IP address and time are logged for statistical purposes; there is no further personal reference other than the aforementioned for the fulfilment of the newsletter dispatch. The legitimate interest according to Art. 6 (1) GDPR is the aforementioned improvement and the fulfilment of the service for the perception of our business interests. You can object to the newsletter at any time.

Objection to advertising purposes

If you object to our advertising purposes, the personal data of the data subject will be used to no longer send you unsolicited advertising and will consequently be stored. It is a legitimate interest according to Art.6 para.1 GDPR to be able to comply with your request until you expressly revoke the objection to advertising purposes in writing.

Contact by e-mail or form

You can contact us via a form on our website. By pressing the “Send” button or comparable buttons or sending an e-mail to us, you agree to the transmission of the data you have entered. In addition, the time of sending to us will be recorded. The personal data voluntarily transmitted to us is used to process your enquiry. The legal basis is again Art.6 para.1 GDPR and the consent given. The data is used for the duration of the contact with you, which is considered concluded as soon as the reason for contacting us has been clarified.

Salary assessments

Our websites provide salary assessments on request. For this purpose, Connexion Emploi uses the data entered by the data subject, such as salary, professional situation and education, and compares these with statistical evaluations or profile data of other users in order to be able to make salary assessments that are as precise as possible. Here, too, a double opt-in may be used to confirm your declaration of intent, which you have made by clicking the corresponding send button. The salary assessment is stored in the form of the interview history by e-mail. A statistical but anonymised evaluation of the data is possible in order to improve our business model and thus the quality of our services.

Processors and service providers

Connexion Emploi uses order processors and service providers for newsletter dispatch, hosting, search engine optimisation and analysis. The legal basis for this is a legitimate interest according to Art.6 para.1 GDPR, which consists in the provision of our services mentioned in this document, in particular for the provision of the services otherwise described in this privacy policy. We have a contractual relationship with the processors in accordance with Art.28 GDPR (Article on Processors).

Data backup and hosting

Contractors for data backup and hosting (to whom personal data is consequently transmitted and where it is stored and processed) of our websites are OVH SAS, 2 rue Kellermann, 59100 Roubaix, France – Amazon Webservices, Inc, 410 Terry Drive Ave North, WA 98109-5210 Seattle, USA (the data is processed exclusively in the EU) – Heroku, subsidiary of salesforce.com, salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany as well as DigitalOcean, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA. These processors may store personal data in the manner and for the duration defined and described in this Privacy Policy.

Search engines, CAPTCHA and analytics services

Connexion Emploi uses Google services such as Webmaster Tools, reCAPTCHA and Google Analytics to statistically analyse visitor flow and behaviour, to protect us from automated spam and to improve our websites and services. The processor is located at Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA. Google’s privacy policy can be viewed at https://www.google.com/intl/de/policies/privacy/. Google Analytics is a web analysis service. Using the anonymizeIp option, the IP address of data subjects from an EU member state or a contracting state of the EEA is partially anonymised. Google Analytics stores cookies (see Cookies) on the system of the data subject, which can be deactivated or deleted as described below. In addition, data such as IP address (anonymised), time, browser and operating system are transmitted to Google as in the log files of our servers.

Newsletter and email dispatch

Our newsletter as well as emails and messages are sent via Mailchimp. The address of the processor is The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. The legal basis is a legitimate interest according to Art.6 para.1 GDPR in the form of the provision of our service and thus the business purpose.

Domain Name Services and Proxy Caching

Connexion Emploi uses Cloudflare, 101 Townsend St, San Francisco, CA 94107, USA as a processor for domain name services and proxy caching. In this process, data packets are sent via Cloudflare servers by requesting the domains of our websites and are temporarily stored for downtimes and maintenance time windows, but no form entries such as personal data. This means that the transmission takes place in a non-EU country. The GDPR compliance of Cloudflare services can be viewed at https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa-20180402.pdf.

Cookies, tracking and sharing

Cookies are files that are stored locally on a computer by the browser. They contain simple text information, which we use as a technical means for user login or to temporarily store anonymised user preferences or browser settings. For example, the user does not have to re-enter his or her access data each time he or she visits the website if the session has been saved via a cookie. Another use of cookies on our website is to remember the last selected language.

Cookies can be deactivated by the data subject in the browser settings, whereby you automatically object to cookies; furthermore, you can delete cookies already stored in your browser, which is possible in all common browsers. If necessary, our websites are limited in their function after deactivating cookies, so that, for example, the default language is displayed instead of your last used language.

For this purpose, tracking pixels or similar techniques may also be used to track the flow of visitors. Other personal data is not stored in cookies. Tracking pixels are used in particular by the buttons for sharing on social networks, whose provider is AddThis, 1900 Oracle Way, Reston, VA 20190, USA. AddThis is a bookmarking provider that enables buttons to be used to simplify sharing on social networks, to make the popularity of a subpage of our websites visible or to set or share a bookmark for the page. AddThis is used millions of times worldwide. By visiting our pages, the server of AddThis is automatically addressed to transmit the current version of the buttons and display of the statistical data for the respective article. In the course of this technical procedure, AddThis is informed about the visit and can include this data in the statistical evaluation. Similar to the log files of our servers, this data contains information about the browser, IP address, time, Internet address and operating system of the person concerned. AddThis uses this data to create anonymised user profiles in order to adapt any advertising or the buttons displayed on the basis of this data. AddThis also uses cookies for this purpose which, as described above, can be deactivated and deleted by the data subject. The current privacy policy of AddThis can be found here http://www.addthis.com/privacy/privacy-policy in its respective version.

Legal remedy

You have the right to object to the processing of your IP address on grounds relating to your particular situation. In this case, please contact us at the email address provided in this privacy policy. Be aware that you will then no longer be able to use our services to the full extent.

Youtube

For the design of our websites, we use videos from YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, a subsidiary of Google, within the scope of a legitimate interest according to Art.6 para.1 GDPR (see search engines, CAPTCHA and analysis services). In addition, software, so-called plugins, from YouTube may be used, which transmits usage data such as the previously visited pages and connects it to your YouTube account when you log in. If you do not wish to have this connection, you should log out of the pages to be visited beforehand.

User account

When you register for a Connexion Emploi user account, we store your personal data for as long as is necessary to provide the agreed service. You can change your data at any time in the Account section after logging in with your user name and password. The personal data will then be deleted if you close your account, remove individual data in the Account area or send us an e-mail accordingly with the request for deletion. The provision of the agreed service is no longer possible with cancellation or deletion and the contract between the data subject and Connexion Emploi is thus terminated. In addition, the IP address and time of registration are recorded in the background during registration. This is done against the background of providing our services, to protect against misuse and, if necessary, to comply with legal obligations, such as helping to solve criminal offences. Registration is voluntary and so is the provision of personal data. The person concerned is free to delete or modify this data at any time using their access data.

Facebook or LinkedIn login

Some of our websites offer the option of logging in via facebook connect using your facebook account or your LinkedIn account. In this case, we receive access to your public profile and your e-mail address, which we use to create and, if necessary, pre-fill your user account. The address for Facebook Inc’s registered office within the European Union is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Similar to AddThis (see Cookies), Facebook receives information about visits to sub-pages of our websites. In addition, Facebook can draw a connection to the person concerned via their own login. The current privacy policy of Facebook can be found at https://de-de.facebook.com/about/privacy/ in its respective version. LinkedIn components have also been integrated on our websites. LinkedIn is a social network specialising in business contacts. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection issues within the EU member states and the EEA. Similar to Facebook, LinkedIn is able to establish a connection to the user profile of the data subject upon login. The current version of LinkedIn’s privacy policy can be found at https://www.linkedin.com/legal/privacy-policy in its respective version.

Services for job providers

In order to bring companies together with the most suitable candidates possible, we offer various services such as ActiSourcing and classic job advertisements. In doing so, we process personal data of entrepreneurs (in the case of partnerships), employees as well as candidates. The origin of the data can be from a contractual relationship, from an initiation or publication of the companies. The deletion of the data takes place upon request as well as after final fulfilment of the contract or business purpose, depending on whether a pre-contractual or contractual relationship exists.

Processing and storage of contract data

Personal data is processed and stored for the purpose of contract initiation, administration and fulfilment, whereby a legitimate interest exists in the fulfilment of our business purposes in accordance with Art.6 para.1 GDPR and the consent of the contractual partner is required. In addition, we store accounting vouchers for a period of ten years and business letters, i.e. any message relating to the preparation, execution or reversal of a transaction, for a period of six years in order to comply with our statutory retention obligations.

Customer advice

Connexion Emploi processes the personal data received through an enquiry from an interested party, even without the conclusion of a contract, in order to be able to continue to advise the interested party in the best possible way and thus with legitimate interest according to Art.6 para.1 GDPR, in order to fulfil our business purpose. If desired, the data subject can request early deletion by e-mail.

Publication of advertisements

Through our offer of advertisements, we process personal data depending on the customer, insofar as our customer provides contact details of an employee to be published, we process their personal data. The legal basis for the processing is the legitimate interest for the performance of a contract and our business purpose according to Art.6 para.1 GDPR. There is no conflicting interest of the data subject, e.g. the employee, because from our customer’s point of view the existing employment relationship already serves as a basis.

Right to information

Connexion Emploi offers you, upon request, the possibility to find out at any time whether personal data of yours are processed or stored by us. We will be happy to inform you about the purpose of the processing, the type of personal data, possible recipients in the case of cooperation with third parties, the planned duration of the storage and its remaining term, possible modification, deletion or rights of appeal as well as the most precise information possible about our processing logic. In addition, the data subject has the right to know whether the personal data have been transferred to third parties outside the EU member states and which contractual relationships underlie the transfer. Intervention prior to the realisation of processing for statistical purposes is not possible. The data subject has the right to receive a one-time copy of the personal data.

Right of rectification

The data subject has the right to request that inaccurate personal data be corrected or completed. Errors included in statistics can no longer be corrected. The data subject must specify the information to be corrected upon request so that we can comply with a correction.

Right of restriction

If you have lodged an objection under Art.21(1) GDPR and the legitimate interests outweigh each other, you can at least request a restriction of processing. If you object to erasure in the case of unlawful data processing and instead demand restriction or dispute the accuracy of the data for a certain period of time, you have the right of restriction. How to proceed in each individual case must be clarified on the basis of the facts of the case and together with the data subject. If the restriction is technically impossible to implement or relates to past processing, the right of restriction may be limited.

Right and obligation to erasure

Connexion Emploi is obliged to delete relevant personal data immediately upon request, should the data subject exercise his or her right. Reasons are that the personal data no longer serve the purpose, you withdraw your consent according to Art.6 para.1 GDPR or Art.9 para.2 GDPR, you object according to Art.21 para.1 GDPR without overriding reasons, there is an unlawful processing of the data, the erasure is obligatory according to the law of an EU member state or EU law or the personal data was collected under the age of sixteen without the consent of the parents according to Art.8 para.1 GDPR. If third parties were involved for the personal data, we are obliged under Art.17 para.1 GDPR, taking into account the available technical possibilities and costs, to inform third parties of the deletion and to request them to delete the personal data concerned. The right to erasure does not apply where the exercise of the right to freedom of expression and information is involved, Connexion Emploi must comply with legal obligations using the personal data concerned, public or public health interests prevail or the data is used for the defence, exercise or assertion of legal claims.

Data portability

You have the right to obtain a machine-readable copy of your personal data from us or to transfer your data to another data controller without hindrance from us if consent has been given in accordance with Art.6(1) GDPR, Art.9(2) GDPR or Art.6(1) GDPR and the processing is based on automated procedures. The freedoms and rights of third parties or public interest must not be impaired in the process.

Right to object

The data subject has the right to object at any time to the processing of personal data concerning him or her pursuant to Article 6(1) of the GDPR. Connexion Emploi will then stop processing the personal data, unless the aforementioned freedoms and rights of third parties, our exercise of legal claims, or public interest are overridden. You also have the right to revoke your declaration of consent under data protection law. The revocation does not affect the lawfulness of the consent until the revocation.

Changes to the data protection declaration

We reserve the right to change this data protection declaration – taking into account the legal requirements. You will find the current version at this point on our website.